System for and method of protecting data in firmware modules of embedded systems

• US 20030056115A1
• Filed: 09/20/2001
• Published: 03/20/2003
• Est. Priority Date: 09/20/2001
• Status: Abandoned Application

• Current Assignee: Siemens Information And Communication Mobile LLC (Siemens AG)
• Original Assignee: Siemens Information And Communication Mobile LLC (Siemens AG)
• Inventors: Falkenberg, Andreas
• Application Number:
  US09/957,204
• Publication Number:
  US 20030056115A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 12/1433 for a module or a part of a module
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/79 in semiconductor storage media, e.g. directly-addressable memories

Abstract

The privacy of data in firmware modules of embedded systems can be obtained by a method and system that restrict access to local variables even where there are limited (or no) restrictions imposed by the program assembler. The technique used by the method and system can use a private data section, having data to be protected, and a public code section, allowing controlled access to data in the private data section. Access to functions in the public code section is allowed to external code. In contrast, data in the private data section is protected and cannot be accessed directly. The only access to such data is provided by public functions defined in a code section.

Claims

1. A method of protecting data in firmware modules of embedded systems from external access, the method comprising:

establishing a private data section and a public code section in firmware, the public code section being configured to provide controlled access to data contained in the private data section by external functions; and

providing access to data contained in the private data section via the public code section to external functions.

2. The method of claim 1, wherein the private data section and public code section are established in an assembly programming language.

3. The method of claim 2, wherein providing access to data contained in the private data section via the public code section to external functions includes establishing functions that allow external functions to have limited access to data contained in the private data section.

4. The method of claim 3, wherein the functions established to allow external functions access to data contained in the private data section cannot be changed by the external functions.

5. The method of claim 4, wherein the private data section and public code section established in firmware are included in a digital signal processor (DSP).

6. The method of claim 5, wherein the digital signal processor (DSP) is associated with a communication device.

7. A system that protects data in firmware modules of embedded systems, the system comprising:

a private data section in firmware that maintains data; and

a public code section in firmware that includes dedicated functions which allow limited access to data contained in the private data section by external functions.

8. The system of claim 7, wherein the private data section and the public code section are included in a digital signal processor (DSP).

9. The system of claim 8, wherein the digital signal processor (DSP) is included in communication device.

10. The system of claim 7, wherein the dedicated functions include a get function.

11. A processing system comprising:

a central processing unit (CPU); and

a storage device coupled to a processor and having stored there information for configuring the CPU to;

store data in a private data section of firmware; and

permit access to stored data in the private data section by functions defined in a public code section of firmware.

12. The system of claim 11, wherein the private data section and public code section are written in an assembly programming language.

13. The system of claim 12, wherein permitting access to stored data in the private data section by functions defined in a public code section of firmware includes establishing functions that allow external functions to have limited access to data contained in the private data section.

14. The system of claim 13, wherein the functions established to allow external functions access to data contained in the private data section cannot be changed by the external functions.

15. The system of claim 14, wherein the private data section and public code section established in firmware are included in a digital signal processor (DSP).

16. The system of claim 15, wherein the digital signal processor (DSP) is associated with a communication device.